Administrator

The administrator of personal data pursuant to Article 4 (7) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR) is the company:

CYBER-GUARDIANS.cz s.r.o.
Sochorova 3226/40, Žabovřesky, 616 00 Brno
Company Registration No.: 19999879, ID No.: CZ19999879, Data box: kvwt5ip

The Administrator will process your personal data in accordance with the terms set out below.

Data Protection Officer (DPO)

The Administrator has not appointed a Data Protection Officer.

What personal information do we process?

Personal data (PD) means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person (or also a "data subject") who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

We only process personal data that you provide to us in connection with your use of theCyberSecurityPlatform.com services. As a rule, this involves providing access to the online portal Community.CyberSecurityPlatform.cz or ensuring participation in training courses or other events organised by us.

The data subjects are therefore most often

• Visitors to the website

• Registered members of the Community.CyberSecurityPlatform.cz portal

• Participants of trainings, conferences and other events organised as part of the activities of CyberSecurityPlatform.cz

• Contact persons of our partners.

In practice, this is usually the information you provide when filling in the contact form or registering on the online portal:

• Name and surname,

• e-mail address,

• telephone number,

• other data that you voluntarily provide, such as your professional role/specialisation, etc. 

In addition, we also collect data when you use our services, such as

• IP address,

• Cookies (see below)

• or other online identifier.

Note: We take promotional photos at some CyberSecurityPlatform.cz events, but this is not a systematic processing of personal data.

Why and on what basis do we process personal data?

The lawful basis for processing personal data is:

• Performance of a contract (e.g. paid attendance at our courses, commercial registration),

• Compliance with legal obligations (e.g. archiving of accounting records),

• Legitimate interest (e.g. operational and security logs and statistics, marketing outreach to potential partners, promotions).

The purpose of processing personal data is:

• to deal with your enquiry,

• providing CyberSecurityPlatform.cz services (simplified - membership, events, courses, partnerships),

• sending newsletters. 

There is no automatic individual decision making by the administrator according to article 22 of the GDPR.

Who will have access to your information?

Only authorised personnel have access to your personal information. The partners with whom we share your information also have technical and organisational security measures in place to prevent unauthorised or accidental access to, or other misuse of, your information.

Third parties who may have access to your personal information as necessary

In order to carry out all of CyberSecurityPlatform.com's activities, we use the services of third parties with whom we may share some of your personal information. In some cases, these third parties may also act as processors of the personal data:

• Mighty Networks (Community.CyberSecurityPlatform.cz - we operate an important online environment for member management and member communication on this platform)

• iDoklad and Fakturoid

• Atlassian

• Google Workspace

• Google Analytics (cookies - see below)

• Solidpixels (website)

• Substack (newsletter)

• other third parties involved in the implementation of CyberSecurityPlatform.cz services / activities (e.g. co-organisers of conferences, courses, etc.). - in such cases, we will mention these third parties when registering for specific events).

Please note that we are also obliged to provide some of your personal data to public authorities under certain well-defined conditions (e.g. in the case of criminal proceedings).

The Administrator does not intend to transfer personal data to third countries. All data is stored in EU countries or countries designated by the EU as safe.

Cookies

In order to make it easier and more enjoyable for you to navigate the CyberSecurityPlatform.cz website and to continuously improve our website, we also process cookies.

Functional cookies

• So-called functional or technical cookies are necessary for the operation of this website. The technical storage of these cookies on a terminal device does not require the consent of the data subject, or "subscriber" as defined in Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications and on Amendments to Certain Related Acts (Act on Electronic Communications).

Analytical cookies

• If we use analytical cookies or other similar cookies, you must give us your consent when you load the page.

• Analytical cookies (Google Analytics) generally count website traffic and, by collecting anonymous statistics, allow us to better understand our visitors and thus continually improve the site.

Marketing cookies

We do not use any marketing cookies.

How long will your information be stored?

The Administrator will keep your personal data for the period of time necessary for the exercise of rights and obligations arising from the contractual relationship between you and the Administrator and for the assertion of claims arising from this contractual relationship, and then for a period of 10 years after the termination of the contractual relationship.

With regard to your individual membership (user account) on the Community.CyberSecurityPlatform.cz platform, you can manage your data and cancel your account yourself. Therefore, we store your personal data here for the duration of your membership and then for 1 year from the date of cancellation of your account.

You may exercise any of your rights described below at any time. At the end of the retention period, the administrator will delete the personal data.

Is my personal information secure?

The Administrator declares that it has taken all appropriate technical and organisational measures to protect your personal data.

It is important to note that even maximum security does not guarantee 100% protection of personal data against access, copying, disclosure, alteration or destruction by third parties. Without your help and responsible behaviour, we cannot fully ensure the security of your information. Therefore, please keep your authentication credentials for our services safe and follow basic security principles.

If you have any concerns about the security of your personal information or suspect a security incident, please contact us immediately (see Contacts).

What are your privacy rights?

Please note that you are under no obligation to provide us with any information and that the provision of information is voluntary. However, we will not be able to provide you with our services if you do not provide the data marked as mandatory.

Under the GDPR, you have the right to contact our company as the administrator of your personal data:

• Request access to the personal data we process about you, and exercise the right of access to such personal data and other information as referred to in Article 15 of the Regulation,

• request the rectification of personal data we process about you if it is inaccurate, request the deletion of personal data (right to be forgotten) in certain cases,

• request the restriction of data processing,

• obtain personal data relating to you in a structured, commonly used and machine-readable format and have the right to transfer that data to another administrator,

• in certain cases, the right to object to or complain about the processing,

• the right to be informed of a personal data breach in certain cases,

• other rights set out in the Data Protection Act and the General Data Protection Regulation 2016/679 once it comes into force.

You can exercise any of these rights by contacting us using the contact details below. If we receive your request, we will inform you of the action taken without undue delay and in any event within one month of receiving your request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. Any data subject using our services has the possibility to obtain an overview of all personal data we hold about them.

In the event of non-acceptance of your request, we must inform you of the reasons for non-acceptance without delay and within one month of receipt. In certain cases where your request is unreasonable or unfounded (in particular, in cases of unreasonable repetition of requests), the Regulations do not require us to comply with all or part of your request. In such cases, we may charge you a reasonable fee taking into account the administrative costs involved in providing the requested information or communication or taking the requested action. As a data subject, you always have the right to contact the supervisory authority directly, which is the Data Protection Authority (www.uoou.cz).

If we receive your request but have reasonable doubt as to your identity, we may ask you to provide additional information necessary to confirm your identity.

You have the right to complain to a supervisory authority or seek judicial redress if you believe that our company is processing your personal data unlawfully or otherwise violating your rights.

How can you contact us?

If you have any questions or wish to exercise your legal rights, you can contact us by email: info@cybersecurityplatform.cz or by correspondence - see the Administrator's address above.